CVE-2026-53825: OpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope

Synopsis

An arbitrary local file read vulnerability affects OpenClaw versions before 2026.4.7, found in the memory-wiki ingest feature. The flaw is reachable over the network by an authenticated user holding operator.write scope, meaning no admin-level access is required. Successful exploitation lets an attacker read arbitrary files from the host filesystem by specifying malicious paths during a wiki memory ingest operation. A patched-image rebuild at version 2026.4.7 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable memory-wiki ingest endpoint is exposed over the network, so an attacker must be able to reach the OpenClaw service remotely.

• AuthenticationRequired

  The attacker must hold a valid account with operator.write scope; any low-privilege account carrying that scope is sufficient.

• Victim interactionNot required

  No action from another user or administrator is needed to trigger the file read.

• Attack complexityDetail

  Exploitation is reliable and condition-free; no race conditions or special environmental factors are required.

Blast Radius

• An attacker reads arbitrary files from the local filesystem of the host running OpenClaw, including configuration files, secrets, and credentials stored on disk.
• Sensitive data such as API keys, private certificates, or environment files outside the intended ingest directory can be exfiltrated by importing them into wiki memory.
• Host-level file contents become visible inside the wiki memory store, potentially exposing data to other users with wiki read access.